Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Force LAN IP range to use Squid / SquidGuard and bypass for all others

    Scheduled Pinned Locked Moved pfSense Packages
    1 Posts 1 Posters 2.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      briank
      last edited by

      Using pfSense 2 RC1 as a captive portal, base setup with two interfaces (LAN/WAN) with a wireless AP connected to LAN.  I have Squid and SquidGuard installed and am using DHCP on the LAN segment.  I'd like to force several PCs and iMacs to use the proxy while bypassing it for all other hosts.

      I've configured squid as a transparrent proxy and tried to bypass the DHCP IP range from the proxy by using "Bypass proxy for these source IPs" in the squid proxy GUI.  The hosts that I want forwarded through the proxy would be statically assigned and not in this range.  However, when I put a range such as 10.10.10.50-10.10.10.250, nothing gets proxied.  I'm assuming it doesn't like the range defined this way.  It there another way I can enter it without listing all 200 IPs separated by a ;.  If I remove the range, the proxy works fine, so i'm pretty sure the problem has something to do with my IP range.

      Or, is there another way to accomplish this?  The bottom line is I'm trying to content filter several LAN PC's while bypassing the filter for all other LAN devices.

      Thanks

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.